CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Flash Player and Adobe AIR in specific versions are vulnerable to arbitrary code execution or denial of service due to memory corruption. The issue affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
A double free vulnerability exists in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and in Adobe AIR before 15.0.0.356, allows attackers to execute arbitrary code.
Microsoft Internet Explorer versions 6 through 10 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2014-4143.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Podatność w OleAut32.dll w OLE w systemach Windows umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez specjalnie przygotowaną stronę internetową. Problem dotyczy nieprawidłowego przetwarzania wartości rozmiaru w funkcji SafeArrayDimen.
The vulnerability in Schannel in Microsoft Windows allows remote attackers to execute arbitrary code via crafted packets. It affects multiple versions of operating systems, including Windows Server 2003, Windows Vista, Windows 7, Windows 8, and Windows Server 2012.
Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font.
A vulnerability in Microsoft .NET Framework related to improper TypeFilterLevel checks, allowing remote attackers to execute arbitrary code via crafted data sent to a .NET Remoting endpoint.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'